This advisory covers a set of security fixes and bug enhancements for the Red Hat Enterprise Linux 8 Real Time Linux Kernel (kernel-rt). The key security issues include a use-after-free vulnerability in the bonding driver (CVE-2026-31419) that can cause denial of service, as well as other use-after-free and validation issues across various kernel subsystems such as drm/amd/display, net/mana, ALSA usb-audio and aloop, net/sched, RDMA/mana, and nvmet-tcp. The update also resolves a kernel panic issue related to stale DEADLINE PI state during rt_mutex de-boosting. The vendor advisory confirms these fixes are included in updated kernel packages and that a reboot is required for remediation.

The use-after-free vulnerabilities can lead to denial of service conditions and potentially impact confidentiality, integrity, and availability of affected systems. The CVSS vector for CVE-2026-31419 indicates local attack vector with low complexity, requiring low privileges and no user interaction, with high impact on confidentiality, integrity, and availability. Other vulnerabilities similarly affect kernel stability and security. No known exploits in the wild have been reported at this time.

Red Hat has released updated kernel packages for Red Hat Enterprise Linux 8 that address these vulnerabilities and bugs. Users should apply the available kernel updates as detailed in the Red Hat advisory RHSA-2026:27353 and reboot affected systems to ensure the fixes take effect. Patch status is confirmed by the vendor advisory. No additional mitigations are specified beyond applying the official update and rebooting.